Privacy Policy

Welcome to Punch Pizza. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website food-punchpizza.click (the "Website"), place an order, or otherwise interact with us. Please read this policy carefully. If you do not agree with the terms of this Privacy Policy, please discontinue use of our Website and services immediately.

By accessing or using our Website and services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. This policy applies to all users located in the United States and is governed by applicable federal and state privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the Federal Trade Commission (FTC) Act, among other applicable regulations.

1. Who We Are

Punch Pizza is a food business operating in the United States. We provide food ordering and related services through our Website. Our contact details for privacy-related matters are as follows:

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us at the email address listed above.

2. Information We Collect

We collect information about you in a variety of ways depending on how you interact with our Website and services. The categories of information we collect include, but are not limited to, the following:

2.1 Personal Identification Information

When you register an account, place an order, or contact us, we may collect:

• Full name
• Email address
• Phone number
• Billing and delivery address (street, city, state, ZIP code)
• Payment information (credit/debit card details, billing address — processed securely through third-party payment processors)
• Date of birth (where required for age verification)
• Username and password for account creation

2.2 Order and Transaction Data

We collect records of your interactions with us, including:

• Order history and preferences
• Items purchased, quantities, and pricing
• Special dietary requests or food preferences
• Loyalty points, rewards, or promotional redemptions
• Payment transaction records and confirmation numbers

2.3 Usage Data

When you browse our Website, we automatically collect certain information about your device and browsing behavior, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on each page
• Referring and exit URLs
• Clickstream data and navigation patterns
• Date and time of access
• Search queries made within our Website

2.4 Device Information

We may collect information about the devices you use to access our services, including:

• Device type (desktop, mobile, tablet)
• Device identifiers and hardware model
• Mobile network information
• Mobile operating system and version
• Unique device identifiers (e.g., IDFA, GAID)

2.5 Location Data

With your consent, we may collect precise or approximate location data to facilitate delivery services, show nearby store locations, and improve our service offerings. You may disable location services through your browser or device settings, though this may affect certain features of our Website.

2.6 Communications Data

If you contact us via email, phone, or through contact forms on our Website, we may collect:

• The content of your messages
• Your contact details provided in the communication
• Records of correspondence for quality assurance purposes

2.7 Cookie and Tracking Data

Our Website uses cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and deliver personalized content and advertising. For detailed information, please see Section 8 (Cookie Usage) of this policy.

2.8 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social media platforms if you interact with our social media pages or use social login features
• Third-party food delivery platforms or aggregator services
• Analytics providers and advertising partners
• Payment processors and fraud prevention services

3. How We Use Your Information

We use the information we collect for a variety of legitimate business purposes, including:

3.1 Service Provision

• To process and fulfill your food orders
• To manage your account and provide customer support
• To facilitate payment processing and prevent fraud
• To communicate order confirmations, updates, and delivery notifications
• To manage loyalty programs, discounts, and promotional offers
• To respond to your inquiries, complaints, or requests

3.2 Website Improvement and Analytics

• To understand how visitors use our Website and improve its functionality
• To analyze trends, monitor usage patterns, and compile aggregate data
• To conduct A/B testing and measure the effectiveness of changes to our Website
• To troubleshoot technical issues and optimize performance

3.3 Marketing and Communications

• To send you promotional emails, newsletters, and special offers (where you have opted in)
• To deliver personalized recommendations based on your order history and preferences
• To display targeted advertising on our Website and through third-party platforms
• To conduct surveys and gather feedback about our products and services
• To notify you about new menu items, seasonal promotions, or changes to our services

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any email we send you, or by contacting us at [email protected].

3.4 Legal and Compliance Purposes

• To comply with applicable laws, regulations, and legal obligations
• To enforce our Terms of Service and other agreements
• To detect, prevent, and address fraud, security breaches, or other harmful activities
• To protect the rights, property, and safety of Punch Pizza, our customers, and the public
• To respond to lawful requests from governmental authorities and law enforcement agencies

4. Legal Basis for Processing (Applicable to California Residents)

Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), California residents have specific rights regarding their personal information. We collect and process your personal information based on the following grounds:

• Contractual Necessity: Processing required to fulfill your orders and manage your account.
• Legitimate Business Interests: Analytics, fraud prevention, and service improvement.
• Consent: Marketing communications and non-essential cookies, where you have provided consent.
• Legal Obligation: Compliance with applicable laws and regulatory requirements.

We do not sell your personal information to third parties. However, we may share personal information with trusted service providers for business purposes as described in Section 5 of this policy.

5. Sharing Your Information with Third Parties

We do not sell, rent, or lease your personal information to third parties for their own marketing purposes. However, we may share your information with certain categories of third parties under the following circumstances:

5.1 Service Providers and Business Partners

We share information with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: To securely process transactions (e.g., Stripe, PayPal, or similar platforms).
• Delivery Partners: Third-party delivery services that fulfill your food orders.
• Email and Marketing Platforms: To manage and send marketing communications.
• Analytics Providers: Such as Google Analytics, to analyze Website usage and performance.
• Cloud and Hosting Services: To host our Website and store data securely.
• Customer Support Tools: Platforms that help us manage customer inquiries and support tickets.
• Fraud Prevention Services: To verify transactions and prevent fraudulent activity.

All service providers are contractually obligated to use your information only for the purposes for which it was shared and to maintain appropriate security measures.

5.2 Legal Requirements

We may disclose your information when required to do so by law or in response to:

• Valid legal processes, such as subpoenas, court orders, or warrants
• Requests from government agencies or regulatory authorities
• Situations where disclosure is necessary to protect the rights or safety of any person
• Situations involving the investigation of fraud or security breaches

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor. We will notify you via email or a prominent notice on our Website of any such change in ownership or use of your personal information.

5.4 Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other business purposes.

6. Data Security

We take the security of your personal information seriously and implement a variety of technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your browser and our Website.
• Secure Payment Processing: Payment card information is processed through PCI-DSS compliant payment processors. We do not store full card numbers on our servers.
• Access Controls: Access to personal information is restricted to authorized personnel who need it to perform their job functions.
• Regular Security Audits: We conduct regular reviews of our information collection, storage, and processing practices to guard against unauthorized access.
• Data Minimization: We collect only the minimum amount of personal data necessary for the purposes described in this policy.
• Employee Training: Our staff receive regular training on data protection and security best practices.
• Incident Response Plan: We maintain a data breach response plan and will notify affected users and relevant authorities as required by law in the event of a security incident.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information. We are committed to honoring these rights in accordance with the CCPA/CPRA and applicable federal law:

7.1 Right to Know and Access

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the purposes for which it was used, and the categories of third parties with whom it was shared.

7.2 Right to Correction

You have the right to request that we correct inaccurate personal information we hold about you. You may also update your account information directly through your profile settings on our Website.

7.3 Right to Deletion

You have the right to request that we delete personal information we have collected about you, subject to certain exceptions (e.g., where retention is required to complete a transaction, comply with a legal obligation, or for other legitimate purposes permitted by law).

7.4 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format, and to request that we transfer this information to another entity where technically feasible.

7.5 Right to Opt Out of Sale or Sharing

Under the CCPA/CPRA, California residents have the right to opt out of the sale or sharing of their personal information for cross-context behavioral advertising. Although we do not sell personal information in the traditional sense, if you would like to opt out of data sharing for advertising purposes, please contact us at [email protected].

7.6 Right to Limit Use of Sensitive Personal Information

Under the CPRA, you may have the right to limit our use and disclosure of sensitive personal information (e.g., precise geolocation, financial information) to purposes strictly necessary to provide the services you have requested.

7.7 Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. We will not deny you goods or services, charge different prices, or provide a different level of quality of services because you exercised your rights under this policy.

7.8 Right to Opt Out of Marketing

You may opt out of receiving marketing communications from us at any time by clicking the "unsubscribe" link in any marketing email, or by contacting us directly at [email protected]. Please note that even if you opt out of marketing emails, we may still send you transactional or service-related communications.

7.9 How to Submit a Rights Request

To exercise any of the rights listed above, please contact us by:

• Email: [email protected]

We will acknowledge your request within 10 business days and respond substantively within 45 calendar days of receipt. If we require additional time (up to 90 days), we will notify you of the extension and the reason. We may need to verify your identity before processing your request.

8. Cookie Usage

Our Website uses cookies and similar tracking technologies (such as web beacons, pixel tags, and local storage) to enhance your user experience, analyze Website performance, and deliver relevant advertising. By continuing to use our Website, you consent to the use of cookies in accordance with this policy.

8.1 Types of Cookies We Use

8.2 Managing Your Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling certain cookies may affect the functionality of our Website. For more detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

8.3 Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Currently, our Website does not respond to DNT signals, as there is no uniform standard for how such signals should be interpreted. We will update this policy if a standard is adopted in the future.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal, regulatory, and contractual obligations. Our general retention practices are as follows:

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention and disposal procedures.

10. Children's Privacy

If you are under 18 years of age, please do not use our Website or provide any personal information to us. If we become aware that we have inadvertently collected personal information from a child under the age of 18 without verifiable parental consent, we will take immediate steps to delete such information from our records.

In compliance with the Children's Online Privacy Protection Act (COPPA), if you believe we have collected personal information from a child under 13, please contact us immediately at [email protected] so we can take appropriate action.

Parents or guardians who believe their child has provided us with personal information without their consent are encouraged to contact us using the details provided in Section 15 of this policy.

11. International Data Transfers

Punch Pizza is based in the United States and primarily operates within the United States. However, some of the third-party service providers we use (such as cloud hosting, analytics, or email marketing platforms) may process or store data on servers located in other countries.

If your personal information is transferred outside of the United States, we ensure that appropriate safeguards are in place to protect your information in accordance with applicable law. These safeguards may include:

• Data processing agreements with service providers that include standard contractual clauses
• Use of service providers who are certified under applicable cross-border data transfer frameworks
• Ensuring that recipient countries offer an adequate level of data protection

By using our Website and services, you acknowledge and consent to the transfer of your personal information to the United States and potentially to other countries, subject to the protections described in this policy.

12. Third-Party Links and Services

Our Website may contain links to third-party websites, social media platforms, or embedded content from external services (e.g., Google Maps for store locator, social media sharing buttons). These third-party services have their own privacy policies, and we are not responsible for their practices.

We encourage you to review the privacy policies of any third-party websites or services you visit through links on our Website. The inclusion of a link on our Website does not imply our endorsement of the linked site's privacy practices.

13. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. When we make changes, we will update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we handle your personal information, we will provide more prominent notice, such as sending an email notification to registered users or displaying a prominent banner on our Website. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of our Website and services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

14. Filing a Complaint with a Data Protection Authority

If you are a California resident and believe that we have not handled your personal information in accordance with the CCPA/CPRA, you have the right to file a complaint with the California Privacy Protection Agency (CPPA) or the California Attorney General's Office.

14.1 California Privacy Protection Agency (CPPA)

14.2 California Attorney General

14.3 Federal Trade Commission (FTC)

For consumer protection complaints at the federal level, users may contact the Federal Trade Commission (FTC), which enforces federal consumer protection laws including those related to data privacy and security:

We encourage you to contact us first at [email protected] to attempt to resolve any privacy concerns before filing a complaint with a regulatory authority. We are committed to working with you to address your concerns in a timely and satisfactory manner.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please do not hesitate to contact our privacy team using the information below. We are committed to addressing your inquiries promptly and transparently.

When contacting us regarding a privacy request or concern, please include your full name, contact email address, and a clear description of your request or concern so that we can respond as efficiently as possible. For identity verification purposes, we may request additional information to confirm your identity before processing certain requests.

16. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States, including applicable federal privacy regulations enforced by the Federal Trade Commission (FTC) under the FTC Act (15 U.S.C. § 45), and, where applicable, the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.) as amended by the California Privacy Rights Act. Any disputes arising under this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of competent jurisdiction in the United States.

This Privacy Policy was last reviewed and updated on May 7, 2026. © 2026 Punch Pizza. All rights reserved.